To do:

• loop run script and/or watchdog and/or cfengine
• fix syslogs...
• dns config files - fetch generic and/or your own w/ environment?
• document:
• default to vanilla caching server, note acls
• note fd limits/etc and the various workarounds if needed
• conf file:
• do-daemonize: no (or -d ?)
• add root-hints / verify current
• dnssec configuration
• RUN unbound-anchor (for dnssec)